NVD

Id
15455  
Name
CVE-2010-4170  
Description
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-07  
Modified Date
2012-07-27  
Seq
2010-4170  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87289 15455 CVE-2010-4170 FEDORA-2010-17865  View
87290 15455 CVE-2010-4170 FEDORA-2010-17868  View
87291 15455 CVE-2010-4170 FEDORA-2010-17873  View
87292 15455 CVE-2010-4170 http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commit;h=b7565b41228bea196cefa3a7d43ab67f8f9152e2  View
87293 15455 CVE-2010-4170 [systemtap] 20101117 important systemtap security fix  View
87294 15455 CVE-2010-4170 DSA-2348  View
87295 15455 CVE-2010-4170 15620  View
87296 15455 CVE-2010-4170 RHSA-2010:0894  View
87297 15455 CVE-2010-4170 RHSA-2010:0895  View
87298 15455 CVE-2010-4170 44914  View
87299 15455 CVE-2010-4170 1024754  View
87300 15455 CVE-2010-4170 systemtap-staprun-priv-escalation(63344)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36713 JVNDB-2010-002493 SystemTap の staprun runtime ツールにおける権限昇格の脆弱性 SystemTap の staprun runtime ツールは、modprobe を実行する前に、MODPROBE_OPTIONS の環境変数を適切にクリアしないため、権限を取得される脆弱性が存在します。 CVE-2010-4170 46750 CVE-2010-4170 15455 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002493.html 2010-11-17 2011-02-10 View